breautek commented on issue #342:
URL: 
https://github.com/apache/cordova-plugin-inappbrowser/issues/342#issuecomment-2741560043

   ## Android
   
   If you're using certificates that isn't by a well known/trusted certificate 
author (such as a self-signed or an internal corporate signed certificate) then 
you'll need to provide the certificate with android's network security policy.
   
   By default Cordova doesn't have any network security config, so the config 
file will need to be created via `<config-file>`, and the android manifest will 
need to be modified via `<edit-config>`. You'll also need to provide the 
certificate as a raw resource using `<resource-file>`.
   
   This [SO](https://stackoverflow.com/a/71542188) post should help you 
understand how the security policy should be formed.
   
   After this, all android networking (including webview networking) should 
accept that certificate as trustworthy.
   
   Note that this only works for API 24 (Android 7)+ devices.
   
   ## iOS
   
   I'm not as experienced with iOS development but I do not believe there is a 
way to import self-signed certificates in a way that allows all networking in 
your application to use, like Android's network security policy.
   
   I believe the only way that is possible is through Apple's MDM (Mobile 
Device Management), or have the user install the certificate themselves.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@cordova.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@cordova.apache.org
For additional commands, e-mail: issues-h...@cordova.apache.org

Reply via email to